This English translation is provided for convenience. In case of discrepancy, the French version prevails.
Chess-Uno collects only what is needed to let you play and be ranked. No advertising, no audience measurement tool, no tracking cookie.
Data controller
The publisher of the website, a private individual (see the legal notice), reachable at [email protected].
Data processed
| Data | Purpose | Retention |
|---|---|---|
| Username | Identify your account and show you to other players. | Until the account is deleted. |
| Password | Signing in. It is never stored in clear text: only a salted hash (scrypt) is kept. | Until the account is deleted. |
| Session tokens | Staying signed in. The token is kept in your browser’s local storage; the server only keeps a hash of it. | Until you sign out or the account is deleted. |
| Games | Moves, cards drawn and log of each game, to resume after a disconnection and to settle disputes. | Until the account is deleted. |
| Ranked results | Elo rating, statistics, head-to-head records. | Until the account is deleted, then kept without your username so as not to distort other players’ rankings. |
| IP address | Limiting sign-in attempts (protection against attacks). Kept in memory, never recorded by the game. | One minute. The hosting provider’s technical logs follow its own policy. |
Legal bases
- Performance of the service you request by creating an account: account, games, ranking.
- Legitimate interest: security of the service (limiting sign-in attempts).
What is public
Your username, Elo rating and tier, statistics, ranked results and head-to-head records appear in the ranking and on your profile, visible to everyone. Games against the AI are not ranked.
Storage in your browser
The website does not use cookies. It stores in the browser’s local storage your session token, to keep you signed in, and your display preferences (language, sound): this storage is strictly necessary for the service and therefore does not require consent.
Recipients and processors
Your data is neither sold nor shared for commercial purposes. It is processed by:
- Railway Corporation (United States): hosting of the server and the database;
- Cloudflare, Inc. (United States): domain name management and, where applicable, routing of traffic.
These transfers outside the European Union are covered by the safeguards provided for by the GDPR (standard contractual clauses of the European Commission or the EU–US Data Privacy Framework, depending on the provider).
Security
Encrypted connections (HTTPS), passwords and tokens stored as hashes, limited sign-in attempts, database access restricted to the hosting environment.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise them — in particular to delete your account — write to [email protected] from an address that allows you to be identified, stating your username. You will receive an answer within one month.
You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).